Static task
static1
Behavioral task
behavioral1
Sample
9cf90e965a85e08e76a3404655543f10N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9cf90e965a85e08e76a3404655543f10N.exe
Resource
win10v2004-20240802-en
General
-
Target
9cf90e965a85e08e76a3404655543f10N.exe
-
Size
32KB
-
MD5
9cf90e965a85e08e76a3404655543f10
-
SHA1
f4259735bb93e8bbe8fe8d27454a827d2cbfbe50
-
SHA256
584834a60099a94fdf806e0e125fbb115c977a53d3337af44f7c23aea26d163c
-
SHA512
80862fcdb4bbd32e68b1fc309784651627b273c2c5b72cc4e51950464145ebdbb81e75ed667d81449ec8158a6e046ca715add2c69b20158adc97d90743dce7b0
-
SSDEEP
192:GAGqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIa6abHa5tGbFOvhn:PVR8iQLoFx1jW5sIZR5tGwvN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9cf90e965a85e08e76a3404655543f10N.exe
Files
-
9cf90e965a85e08e76a3404655543f10N.exe.exe windows:5 windows x86 arch:x86
6e422d9571eebc39b9447b608be77f42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
StrStrA
StrChrA
ws2_32
htons
setsockopt
WSAIoctl
recv
WSAGetLastError
closesocket
gethostbyname
send
connect
WSAStartup
socket
gethostname
WSACleanup
wininet
DeleteUrlCacheEntry
advapi32
GetUserNameA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
urlmon
URLOpenBlockingStreamA
kernel32
CreateMutexA
GetModuleFileNameA
CreatePipe
OpenMutexA
CloseHandle
GetLastError
GetVersionExA
CreateDirectoryA
lstrcatA
ReadFile
TerminateProcess
GetTempPathA
lstrcpyA
SetCurrentDirectoryA
WinExec
GetLocalTime
HeapAlloc
CreateProcessA
GetExitCodeProcess
ExitProcess
GetComputerNameA
CreateFileA
GetFileSize
lstrcmpA
lstrlenA
IsProcessorFeaturePresent
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
WriteFile
GetCommandLineA
GlobalAlloc
Sleep
shell32
ShellExecuteA
user32
wsprintfA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ